/*
 * Copyright 2002-2019 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      https://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.keycloak.quickstart;

import org.springframework.security.core.annotation.AuthenticationPrincipal;
import org.springframework.security.oauth2.jwt.Jwt;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.Optional;

@RestController
public class OAuth2ResourceServerController {

	protected Optional<List<String>> getRoles(Jwt jwt) {

		Map realmAccess = jwt.getClaim("realm_access");

		if (realmAccess == null)
			return Optional.empty();
		return Optional.of((List<String>) realmAccess.get("roles"));
	}

	@GetMapping("/")
	public String index(@AuthenticationPrincipal Jwt jwt) {

		// ArrayList roles
		Optional<List<String>> roles = getRoles(jwt);
		System.out.println("Roles:");
		for (String role : roles.get()) {
			System.out.println(role);
		}

		// ArrayList scopes
		String ss = (String) jwt.getClaim("scope");
		String[] scopes = ss.split(" ");
		System.out.println("Scopes:");
		for (String scope : scopes) {
			System.out.println(scope);
		}

		return String.format("Hello, %s!\nclaims = %s \n", jwt.getClaimAsString("preferred_username"), jwt.getClaims());
	}

	@GetMapping("/protected/premium")
	public String premium(@AuthenticationPrincipal Jwt jwt) {
		return String.format("Hello, %s!", jwt.getClaimAsString("preferred_username"));
	}
}
